Biological data registration support device, biological data registration support system, biological data registration support method, biological data registration support program, recording medium for strong biological data registration support program

ABSTRACT

A biological data registration support device includes: a control portion configured to acquire a plurality of registration scenarios, each including at least one verification method and associated with respective services, identify a verification method that is commonly included in the plurality of registration scenarios as a common verification method, and acquire one set of biological data for registration regarding the common verification method and one set of biological data for registration regarding the verification method other than the common verification method; and a transmitting portion configured to transmit the biological data for registration and the plurality registration scenarios acquired by the control portion.

CROSS REFERENCE TO RELATED APPLICATIONS

This is a Continuation application of U.S. application Ser. No.16/070,987 filed Jul. 18, 2018, which is a National Stage ofInternational Application No. PCT/JP2017/011958 filed Mar. 24, 2017,claiming priority based on Japanese Patent Application No. 2016-069991,filed Mar. 31, 2016, the contents of which are incorporated herein byreference in their entireties.

TECHNICAL FIELD

The present invention relates to a biological data registration supportdevice, a biological data registration support system, a biological dataregistration support method, a biological data registration supportprogram, and a biological data registration support program thatsupports registration of biological data used for verification.

BACKGROUND ART

In recent years, banking services using ATMs (automatic teller machines)and electronic commerce involving the buying and selling of goods andservices on a computer network have come to be actively performed. Alongwith this, advanced security systems against losses arising fromimpersonation of pre-registered users and systems for enhancing userconvenience have been developed.

Patent Document 1 discloses a system that stores a transaction type anda transaction amount in advance in association with a rank indicating asecurity level, and restricts transactions to be performed by a userbased on a rank determined in accordance with the card type used by theuser and an identity verification method.

Patent Document 2 discloses a system that simplifies operations by auser by setting a plurality of identification numbers for one cash cardand performing processing associated with the inputted identificationnumber.

Patent Document 3 discloses a system that stores bank transactioncontents in association with finger types and provides a transactioncorresponding to the finger type of the finger presented by a user inorder to perform vein authentication.

Patent Document 4 discloses a system that allows users to set respectiveusage conditions for transactions using devices without biologicalauthentication and transactions using devices with biologicalauthentication.

PRIOR ART DOCUMENTS Patent Documents

-   [Patent Document 1] Japanese Unexamined Patent Application, First    Publication No. 2002-288424-   [Patent Document 2] Japanese Unexamined Patent Application, First    Publication No. 2005-063389-   [Patent Document 3] Japanese Unexamined Patent Application, First    Publication No. 2006-172034-   [Patent Document 4] Japanese Unexamined Patent Application, First    Publication No. 2006-331169

DISCLOSURE OF THE INVENTION Problems to be Solved by the Invention

However, the above-mentioned patent documents do not describe how toacquire and register biological data of a user in a system enablingauthentication using a plurality of verification methods such asfingerprint authentication, vein authentication and the like. For thisreason, it has not been possible to efficiently perform registration ofbiological data in authentication using a plurality of verificationmethods. It is therefore an object of the present invention to provide abiological data registration support device that efficiently performsregistration of biological data in authentication using a plurality ofverification methods.

Means for Solving the Problems

The first system of the present invention has a control portionconfigured to acquire a plurality of registration scenarios, eachincluding at least one verification method and associated withrespective services, identify a verification method that is commonlyincluded in the plurality of registration scenarios as a commonverification method, and acquire one set of biological data forregistration regarding the common verification method and one set ofbiological data for registration regarding the verification method otherthan the common verification method; and a transmitting portionconfigured to transmit the biological data for registration and theplurality of registration scenarios acquired by the control portion.

Effects of the Invention

According to the present invention, it is possible to provide abiological data registration support device that efficiently performsregistration of the biological data in authentication using a pluralityof verification methods.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram showing a configuration example of a firstexemplary embodiment.

FIG. 2 is a block diagram showing a configuration example of the firstexemplary embodiment.

FIG. 3 is a drawing showing an example of data stored by the customerdatabase 150 in the first exemplary embodiment.

FIG. 4 is a drawing showing an example of display by the display portion160 in the first exemplary embodiment.

FIG. 5 is a sequence diagram showing an example of the operation of thefirst exemplary embodiment.

FIG. 6 is a drawing showing an example of a display by the displaydevice 14 in the first exemplary embodiment.

FIG. 7 is a drawing showing an example of a display by the displayportion 140 in a modification of the first exemplary embodiment.

FIG. 8 is a drawing showing an example of a display by the displayportion 140 in a modification of the first exemplary embodiment.

FIG. 9 is a block drawing showing a configuration example of a secondexemplary embodiment.

FIG. 10 is a drawing showing an example of data stored by the customerdatabase 151 in the second exemplary embodiment.

FIG. 11 is a sequence diagram showing an example of the operation of thesecond exemplary embodiment.

FIG. 12 is a drawing showing an example of the display by the displayportion 190 in the second exemplary embodiment.

FIG. 13 is a flowchart showing an example of the operation of the secondexemplary embodiment.

FIG. 14 is a block drawing showing a configuration example of the server15 in a third exemplary embodiment.

FIG. 15 is a drawing showing an example of data stored by theverification method database 152 in the third exemplary embodiment.

FIG. 16 is a drawing showing an example of data stored by the servicedatabase 156 in the third exemplary embodiment.

FIG. 17 is a block drawing showing a first example of the hardwareconfiguration of the biological data registration support device in eachexemplary embodiment.

FIG. 18 is a block drawing showing a second example of the hardwareconfiguration of the biological data registration support device in eachexemplary embodiment.

FIG. 19 is a block drawing showing an example of the hardwareconfiguration of the server in each exemplary embodiment.

FIG. 20 is a drawing showing an example of the hardware configuration ofthe biological data verification support device in each exemplaryembodiment.

EXEMPLARY EMBODIMENTS FOR CARRYING OUT THE INVENTION

Hereinafter, exemplary embodiments of the present invention will bedescribed in detail with reference to the drawings. However, theconstituent elements described in the following exemplary embodimentsare examples, and the technical scope of the present invention is notlimited thereto.

First Exemplary Embodiment

(Outline of First Exemplary Embodiment)

A configuration example of the first exemplary embodiment will bedescribed. FIG. 1 is a block diagram showing the outline of thebiological data registration support device 10 according to the firstexemplary embodiment. The biological data registration support device 10includes a control portion 100 and a transmitting portion 101. Thebiological data registration support device 10 may be an informationprocessing device such as a PC, a smartphone, a tablet terminal, awearable terminal, or the like.

First, the control portion 100 acquires a plurality of registrationscenarios, each consisting of at least one verification method. Thecontrol portion 100 may acquire the registration scenarios from otherconstituent elements of the biological data registration supportingdevice 10. Alternatively, the control portion 100 may acquire theregistration scenarios transmitted from an external device. Here, theverification method may be a method of collating two or more sets ofbiological information such as a fingerprint verification method, apalmprint verification method, a vein verification method, a faceverification method, an iris verification method, a voiceprintverification method, and the like. Verification by these verificationmethods is realized by an algorithm corresponding to the type ofbiological information. Biological information refers to information onbiological features or behavioral features of human beings. It is to benoted that although the verification method may be a method of verifyinginformation other than biological information such as a password and agesture, it is preferable that at least one of the verification methodsacquired by the control portion 100 be a verification method usingbiological information. In other words, the registration scenarioconsists of one verification method or a combination of a plurality ofverification methods, and preferably includes at least one verificationmethod using biological data.

Also, each registration scenario is associated with a service. A serviceaccording to the present invention means a service that a user canreceive when, as a result of collating information registered in advanceand information newly acquired from the user, it is verified that theuser is the same as a person registered in advance. Specifically, in thecase of a bank, services such as depositing, withdrawing, transferring,balance inquiry, and the like correspond to services. Further, in thecase of electronic commerce, mediation such as purchase and exhibitionof merchandise, settlement and the like correspond to services. Servicesin the present invention are not limited to those provided in banks andelectronic commerce.

Correspondence between a registration scenario and a service means thatdata capable of specifying the verification method and data capable ofspecifying the service are associated, for example, as shown in FIG. 3 .Data that can specify the registration scenario and data that canspecify the service may already be associated when the control portion100 has acquired these sets of data. Alternatively, after the controlportion 100 has acquired these sets of data, the control portion 100 oranother constituent element may associate these sets of data.

The control portion 100 specifies, as a common verification method, averification method commonly included in the acquired registrationscenarios, and acquires one set of biological data for registrationregarding the common verification method. Biological data means datarepresenting biological characteristics or behavioral features of ahuman such as fingerprint image data, vein image data, face image data,iris image data, voice data, and the like. Biological data regarding theverification method refers to biological data used in the verificationmethod. For example, biological data regarding the verification methodmay be fingerprint image data if the verification method is afingerprint verification method and face image data if the verificationmethod is a face verification method.

The control portion 100 may acquire biological data for registrationfrom an acquiring portion. The acquiring portion may be a component inthe biological data registration support device 10 or may be a componentin another device connected to the biological data registration supportdevice 10. A hardware device that realizes the acquiring portion may bea camera, a scanner, or the like that generates image data by capturingthe image of a fingerprint, a vein, a face, an iris, or the like.Further, the acquiring portion may be a device that generates voice datafrom a voice input from a microphone.

For example, in the case of the control portion 100 having acquired tworegistration scenarios, it will be assumed that the first registrationscenario consists of a fingerprint verification method and a passwordverification method, and the second registration scenario consists of afingerprint verification method and a vein verification method. In thiscase, the control portion 100 specifies the fingerprint verificationmethod, which is included in both of the two registration scenarios, asthe common verification method. Then, the control portion 100 controlsthe acquiring portion so as to acquire one set of biological dataregarding the fingerprint verification method, which is the commonverification method, that is, one set of fingerprint image data. Then,the control portion 100 acquires the one set of fingerprint image datafrom the acquiring portion. Hereinafter, the biological data acquired bythe control portion 100 from the acquiring portion is referred to asbiological data for registration.

Moreover, the control portion 100 acquires from the acquiring portionone set of biological data for registration regarding a verificationmethod other than the common verification method, among the verificationmethods included in the acquired registration scenarios. That is, thecontrol portion 100 acquires one set of biological data, that is, oneset of vein image data, regarding the vein method, which is not averification method commonly included in the two registration scenariosmentioned above. The password verification method, which is averification method other than the common verification method, is averification method that does not use biological data. Therefore, thecontrol portion 100 does not need to cause the acquiring portion toacquire biological data regarding the password verification method.

While the control portion 100 may sequentially acquire a plurality ofsets of biological data from the acquiring portion, by deleting allexcept one thereamong or combining the plurality of sets of biologicaldata, the control portion 100 may finally acquire one set of biologicaldata regarding one verification method.

The transmitting portion 101 transmits the biological data forregistration acquired by the control portion 100 and the plurality ofregistration scenarios. The biological data for registration transmittedby the transmitting portion 101 is collated with, for example,biological data acquired at the time of user authentication. In otherwords, the biological data transmitted by the transmitting portion 101in the present exemplary embodiment is biological data registered withregard to the user receiving a service.

According to the present exemplary embodiment, it is possible to providea biological data registration support device that efficiently performsregistration of biological data in authentication using a plurality ofverification methods in order to appropriately acquire biological dataregarding verification methods included in registration scenarios.

(Constitution of First Exemplary Embodiment)

<Registration of Biological Data>

Although the present invention can be implemented with the aboveconstitution, a more specific configuration example will be describedbelow. In this configuration example, it is assumed that the customer'sbiological data is registered or verified in a bank system. FIG. 2 is ablock diagram showing a configuration example of a biological dataregistration support system 1000 according to the first exemplaryembodiment. The biological data registration support system 1000includes a biological data registration support device 11, a camera 12,a fingerprint scanner 13, a display device 14, a server 15, and abiological data verification support device 16. The biological dataregistration support system 1000 is a bank system used for registeringor verifying customer information at banks.

Each biological data registration support device 11 is arranged at abank branch or the like, and is connected to the biological dataverification support device 16 and the server 15 via a network. Thebiological data registration support device 11 is connected in acommunicable manner with the camera 12, the fingerprint scanner 13, andthe display device 14. The camera 12 is, for example, a camera having aCCD (Charge Coupled Device) sensor, a CMOS (Complementary Metal OxideSemiconductor) sensor, an image processor and the like. An acquiringportion 120 in the camera 12 converts light from the subject received bythe CCD sensor or the CMOS sensor to generate face image data. Thefingerprint scanner 13, while similarly being a device having a CCDsensor, a CMOS sensor, an image processor and the like, in particularhas a structure suited to fingerprint imaging. An acquiring portion 130in the fingerprint scanner 13 converts light from the subject receivedby the CCD sensor or the CMOS sensor to generate fingerprint image data.

The display device 14 may be a device provided with a display portion140 such as a liquid crystal display, a CRT display, or the like.Further, the display device 14 may be provided with an input portionsuch as a touch panel capable of input by touch from the outside. Theserver 15 may be a computer capable of exchanging information with aplurality of client terminals. The biological data verification supportdevice 16 is provided with a device capable of generating and acquiringbiological data such as a scanner, a camera, a recording device, and thelike. The biological data verification support device 16 may be an ATMor the like that provides a banking service.

The control portion 111 in the biological data registration supportdevice 11 acquires candidate scenarios consisting of at least oneverification method. A candidate scenario is a scenario displayed to theuser as a candidate for the registration scenario. The control portion111 may acquire candidate scenarios by reading candidate scenariosstored in a storage portion. The storage portion may be a constituentelement in the biological data registration support device 11 or may bea constituent element of an external device. Alternatively, the controlportion 111 may acquire a candidate scenario received by a receivingportion 110 from an external device.

The control portion 111 controls the display device 14 to display theacquired candidate scenarios in the display portion 140. At this time,the control portion 111 controls the display device 14 so as to displaythe candidate scenarios and the services associated with the candidatescenarios in association with each other. Note that when the controlportion 111 acquires a candidate scenario, the candidate scenario may beassociated with a service. Alternatively, after the control portion 111has acquired a candidate scenario, the control portion 111 may associatea service with the candidate scenario. The association of a candidatescenario and a service means that data that can specify a candidatescenario and data that can specify a service are associated with eachother.

In addition, the control portion 111 acquires the candidate scenarioreceived by the receiving portion 110 from the display device 14 as aregistration scenario, and acquires the service associated with theregistration scenario. After that, the control portion 111 acquires thebiological data for registration regarding the common verificationmethod included in the registration scenario, through the operationdescribed in “Outline of the first exemplary embodiment”. Moreover, thecontrol portion 111 causes a transmitting portion 112 to transmit thebiological data for registration that has been acquired, the pluralityof registration scenarios, and the services associated with theregistration scenarios.

The receiving portion 110 receives from the display device 14 thecandidate scenario selected by the clerk in accordance with the requestof the customer, and transmits the candidate scenario to the controlportion 111.

The transmitting portion 112 transmits the candidate scenario acquiredby the control portion 111 to the display device 14. In addition, thetransmitting portion 112 transmits the biological data for registrationacquired by the control portion 111, the plurality of registrationscenarios, and the services associated with the registration scenariosto the server 15.

The display portion 140 displays the candidate scenarios acquired fromthe control portion 111 in association with services. Then, the inputportion in the display device 14 is used to input the candidate scenarioselected by the employee, out of the candidate scenarios displayed bythe display portion 140. Then, the display device 14 acquires thecandidate scenario selected by the employee from the input portion, andtransmits the acquired candidate scenario to the biological dataregistration support device 11 together with the corresponding service.

The fingerprint scanner 13 is activated upon receiving a signal from thecontrol portion 111. The acquiring portion 130 captures an image of thefingerprint of a finger placed on the fingerprint scanner 13 by thecustomer, and generates and acquires fingerprint image data. Note thatthe imaging of the fingerprint by the acquiring portion 130 may also beperformed in accordance with a signal from the control portion 111.

The camera 12 is activated upon receiving a signal from the controlportion 111. In accordance with a signal from the control portion 111,the acquiring portion 120 captures an image of the customer's face, andgenerates and acquires face image data. Note that the imaging of theface by the acquiring portion 120 may also be performed when a button orthe like provided on the camera 12 is pressed.

A customer database 150 in the server 15 stores the biological data forregistration, registration scenarios, and services that were received bythe receiving portion in the server 15 in association with each other.FIG. 3 shows an example of data stored in the customer database 150.From FIG. 3 , for example, for the customer with ID 123456, thefingerprint verification method and the password verification method areassociated with the service of “withdrawal”, and the fingerprintverification method, the password verification method, and the faceverification method are associated with the service of “transfer”.Further, for ID 123456, fingerprint image data and face image data areassociated as biological information of the customer concerned. Notethat the format of the biological data in FIG. 3 is BMP (bitmap image),but the format of the biological data is not limited thereto.

<Verification of Biological Data>

The verification of biological data in the biological data supportregistration system 1000 will be described. The biological dataverification support device 16 may be an ATM installed in a bank branch,a convenience store, a supermarket or the like. An ATM is a device thataccepts input from customers and provides banking services. Thebiological data verification support device 16 includes an acquiringportion 161 and a display portion 160. The acquiring portion 161acquires biological data of the customer. For example, the acquiringportion 161 may be a camera, a scanner, or the like that generates imagedata by imaging a fingerprint, a vein, a face, an iris, or the like.Alternatively, the acquiring portion 161 may be a device that generatesvoice data from a voice input from the microphone. The display portion16 may be, for example, a device including a liquid crystal display, acathode-ray tube display, or the like. The display portion 16 may beprovided with an input portion such as a touch panel capable of input bytouch from the outside. In FIG. 2 , a fingerprint scanner 1610 isdescribed as an example of the acquiring portion 161.

When the customer inserts a cash card or the bank passbook into thebiological data verification support device 16, the control portion inthe biological data verification support device 16 recognizes the IDnumber of the customer. Note that the control portion may recognize theaccount number, the customer's name, etc. in place of the ID number oralong with the ID number. Then, the control portion causes the displayportion 160 to display a list of services that the biological dataverification support device 16 can provide to the customer. When thecustomer selects a service via the input portion in the biological dataverification support device 16, the control portion transmits the IDnumber and the selected service to the server 15 via the transmittingportion.

The server 15 searches the database 150 and transmits the registrationscenario and the biological data for registration associated with thereceived ID number and the received service to the biological dataverification support device 16. For example, when the ID number is“123546” and the service selected by the customer is “withdrawal”, fromFIG. 3 , the server 15 transmits the registration scenario consisting of“fingerprint verification method” and “password verification method” andthe fingerprint image data “aaa.bmp”. Further, the server 15 maytransmit the password associated with the ID number “123546”. Thepassword may be stored in the database 150 together with the fingerprintimage data or the like, or may be stored in another database. Thebiological data verification support device 16 performs a display foracquiring from the customer biological data regarding the registrationscenario received from the server 15. That is, the display portion 160displays a message prompting the customer to provide fingerprint imagedata.

An example of the display by the display portion 160 is shown in FIG. 4. As shown in FIG. 4 , the display portion 160 displays, for example,“The verification method registered by you uses ‘fingerprint’ and‘password’. Please enter your password and place your finger on thefingerprint scanner, which is the acquiring portion 161.” A customer whosees the display inputs the password that he thinks is correct using aninput portion such as a touch panel. Then, the customer places hisfinger on the fingerprint scanner. The acquiring portion 161 createsfingerprint image data after the finger of the customer has been placed.Note that the order of input of biological data and password by the useris not limited thereto.

Then, the control portion in the biological data verification supportdevice 16 collates the password input by the input portion with thepassword received from the server 15. Furthermore, the control portionverifies the fingerprint image data acquired from the acquiring portion161 with the fingerprint image data received from the server 15. In thecase where the verification of the password and the verification of thefingerprint image data are both successful, the control portion providesthe service to the customer. For example, money that the customer hasdeposited in the bank is transferred to a destination account. When atleast one of the password verification and the fingerprint image dataverification fails, the control portion displays on the display portion160 an indication that the password or fingerprint image data isincorrect, and again prompts the user to reenter the password and thefingerprint image data.

Here, the case will be supposed that the customer cannot input thebiological data for some reason, or refuses to input the data. Forexample, there are cases where it is difficult to acquire clearfingerprint image data from a customer due to the finger being injured.At that time, it is preferable that the customer be able to change thefingerprint verification method to another verification method. Changingof the verification method may be accomplished, for example, by thecustomer selecting “modification of verification method” shown in FIG. 4. When the control portion in the biological data verification supportdevice 16 recognizes that “change of verification method” has beenselected, the control portion may transmit a one-time password to thepreviously registered e-mail address of the customer, and perform theverification using the one-time password.

The mode of changing the verification method is not limited thereto, andmay be changed to a verification method using a second and thirdpassword registered in advance, or may be changed to a verificationmethod using information that only the customer can know (such as thename of a pet, formerly attended school, or the like). Alternatively,the verification method may be made unchangeable, and when the customercannot use the verification method included in the registrationscenario, the provision of the service via the biological dataverification support device 16 may be stopped and the customer may beguided to the teller. In the case where the customer rejects theverification method included in the registration scenario, thebiological data verification support device 16 may perform a uniformprocessing for all customers.

(Operation of First Exemplary Embodiment)

FIG. 5 is a sequence drawing showing an example of the operation of thefirst exemplary embodiment when registering biological data. The displaydevice 14 is assumed to be a display having a touch panel. First, thebank customer goes to the window of a bank branch and informs the clerkthat he wishes to register personal authentication using biologicalinformation. Then, the clerk performs an operation to activate anapplication stored in advance by the biological data registrationsupport device 11. Thereafter, the clerk inputs the customer's ID numberinto the biological data registration support device 11 and starts theprocess of registering the biological data of the customer. Then, thecontrol portion 111 in the biological data registration support device11 acquires candidate scenarios consisting of at least one verificationmethod (S1). The control portion 111 may acquire candidate scenarios byreading the candidate scenarios stored in the storage portion.Alternatively, the control portion 111 may acquire the candidatescenarios received by the receiving portion 110 from an external device.

Then, the control portion 111 controls the display device 14 to displaythe acquired candidate scenarios in the display portion 140 (S2). Atthis time, the control portion 111 controls the display device 14 so asto display the candidate scenarios and the services associated with thecandidate scenarios in a corresponding manner. When the control portion111 acquires the candidate scenarios, the candidate scenarios may beassociated with the services. Alternatively, after the control portion111 acquires the candidate scenarios, the control portion 111 mayassociate the services with the candidate scenarios.

FIG. 6 shows an example of display by the display device 14. In FIG. 6 ,a display allowing selection of candidate scenarios is shown togetherwith the guidance sentence “Please select a scenario to be used forpersonal authentication necessary for receiving each service.” As shownin FIG. 6 , the service of “withdrawal” is associated with a firstcandidate scenario consisting of the fingerprint verification method andthe password verification method, a second candidate scenario consistingof the fingerprint verification method and the vein verification method,and a third candidate scenario consisting of the fingerprintverification method, a password and the face verification method. Theservice of “transfer” is associated with a fourth candidate scenarioconsisting of the fingerprint verification method and the veinverification method and a fifth candidate scenario consisting of thefingerprint verification method, the password verification method, andthe face verification method.

Next, the clerk confirms the display device 14 and asks the customerwhich candidate scenario he wishes to use when receiving each service.For example, suppose that the customer is aware that it is impossible toobtain a clear vein image due to his blood circulation being poor.Therefore, the customer requests to use a candidate scenario notincluding the vein authentication method and consisting of a smallnumber of authentication methods. Then, the clerk selects the radiobutton displayed by the display device 14 in order to select thecandidate scenario desired by the customer for each service. FIG. 6shows the display of the display device 14 in the case where the clerkselects the first candidate scenario for the service of “withdrawal” andselects the fifth candidate scenario for the service of “transfer”.Then, the clerk selects the “OK” button when the selection of thecandidate scenarios is completed.

The input portion on the display portion 140 inputs the candidatescenarios selected by the clerk via the touch panel (S3). Then, thedisplay device 14 transmits the candidate scenarios selected by theclerk, along with the corresponding services, to the biological dataregistration support device 11. The control portion 111 in thebiological data registration support device 11 acquires the candidatescenarios received by the receiving portion 110 as registrationscenarios corresponding to the services transmitted together with thecandidate scenarios (S4). That is, the control portion 111 acquires thefirst registration scenario consisting of the fingerprint verificationmethod and the password verification method, and the second registrationscenario consisting of the fingerprint verification method, the passwordverification method, and the face verification method. From FIG. 6 , thefirst registration scenario corresponds to the “withdrawal” service, andthe second registration scenario corresponds to the “transfer” service.

Next, the control portion 111 specifies the verification method that iscommonly included in the acquired plurality of registration scenarios asa common verification method (S5). For example, the control portion 111specifies the fingerprint verification method, which is the verificationmethod commonly included in the first registration scenario and thesecond registration scenario, as the common verification method.

Then, the control portion 111 causes the acquiring portion 120 and theacquiring portion 130 to acquire one set of biological data forregistration regarding the common verification method and one biologicaldata for registration regarding the verification method other than thecommon verification method (S6, S8). For example, the control portion111 controls the fingerprint scanner 13 to cause the acquiring portion130 to acquire one set of biological data regarding the commonverification method, that is, fingerprint image data. Specifically, thefingerprint scanner 13 is activated upon receiving a signal from thecontrol portion 111. Then, after the customer places his finger on thefingerprint scanner 13, the acquiring portion 130 images the fingerprintof the customer and generates/acquires fingerprint image data. Note thatthe imaging of the fingerprint by the acquiring portion 130 may also beperformed in accordance with a signal from the control portion 111.

Moreover, the control portion 111 controls the camera 12 and causes theacquiring portion 120 to acquire one set of biological data regarding averification method other than the common verification method, that is,face image data. Specifically, the camera 12 is activated upon receivinga signal from the control portion 111. Then, the acquiring portion 120captures an image of the face of the customer in accordance with thesignal from the control portion 111, and generates/acquires face imagedata. It is to be noted that the imaging of the face by the acquiringportion 120 may also be performed when a button or the like provided onthe camera 12 is depressed. Although the password authentication methodis a verification method other than the common verification method,biological data regarding the password verification method is notacquired since biological data is not used in the passwordauthentication method.

The biological data acquired by the acquiring portion 120 and theacquiring portion 130 is transmitted to the biological data registrationsupport device 11 by the transmitting portion (S7, S9). Then, thecontrol portion 111 in the biological data registration support device11 acquires one set of fingerprint image data and one set of face imagedata from the receiving portion 110. While the control portion 111 maysequentially acquire a plurality of sets of biological data from thefingerprint scanner 13 or the camera 12, the control portion 111ultimately acquires one set of biological data for registrationregarding one verification method by deleting all but one from thestorage portion or synthesizing data.

Next, the control portion 111 causes the transmitting portion 112 totransmit one set of fingerprint image data regarding the fingerprintauthentication method, one set of face image data regarding the faceauthentication method, the above-described first registration scenario,and the second registration scenario (S8). For example, the transmittingportion 112 transmits one set of fingerprint image data, one set of faceimage data, the first registration scenario, and the second registrationscenario to the server 15. At this time, the control portion 111 maycause the transmitting portion 112 to transmit information foridentifying the customer, for example, an ID number.

Then, the server 15 may store the ID number, the one set of fingerprintimage data, the one set of face image data, the first registrationscenario, and the second registration scenario in the customer database.By the above operation, the registration of the biological data of thecustomer is completed.

In the present exemplary embodiment, since a plurality of candidatescenarios can be acquired and displayed for one service, the user of thebiological data registration support device 11 can select and register acandidate scenario to be used from among the plurality of candidatescenarios. For that reason, the user can select a scenario that takesinto consideration the characteristics of the user's own body or ascenario toward which the user is less prone to feel resistance.Therefore, the body data registration support device 11 of the presentexemplary embodiment can further improve the user's convenience.

In the present exemplary embodiment, the display device 14 was assumedto be a display having a touch panel, but the biological registrationsupport device 11 may have a display corresponding to the display device14. The biological data registration support device 11 may be a desktopPC (personal computer), a smartphone, a notebook PC, or the like.Furthermore, the input portion may be realized by an input device suchas a mouse, a keyboard, or the like.

Although the camera and the fingerprint scanner are used as devices foracquiring biological data, the present invention is not limited thereto.For example, a palm print scanner for imaging a palm print image, a veinscanner for imaging a vein image, a recording device for acquiring avoice print, and the like may acquire biological data. Furthermore, thedevice for acquiring the biological data and the display device may beprovided in the biological data registration supporting device 11. Forexample, a fingerprint scanner or camera in a tablet terminal mayacquire biological data.

The biological data registration support device 11 may transmit theacquired biological data and registration scenarios to devices otherthan the server 15. For example, the biological data registrationsupport device 11 may transmit the acquired registration scenarios andbiological data to a specific device different from the server 15. Thespecific device may be a storage portion of a customer's cash card, forexample, a device that stores biological data for registration in an IC(Integrated Circuit) chip. In this case, the customer's biological datafor registration is not stored in the server. Therefore, the biologicaldata verification support device 16 may read biological data forregistration from the customer's IC card and perform authentication bycollation with the biological data acquired from the customer.

Furthermore, in the present exemplary embodiment, the biological dataregistration support device 11 was described as being operated by a bankclerk, but the customer himself may operate the biological dataregistration support device 11 to perform registration of biologicaldata. In addition, in the present exemplary embodiment, the customeroperated the biological data verification support device 16, but a clerkmay also operate the biological data verification support device 16.

In the present exemplary embodiment, the biological data verificationsupport device 16 was described as being an ATM, but it is not limitedthereto. For example, in the case where the present invention is appliedto electronic commerce, the biological data verification support device16 may be a desktop PC, a notebook PC, a tablet terminal, a smartphone,or the like.

<Proposed Scenario>

Next, a modification of the first exemplary embodiment will bedescribed. In the modification of the first exemplary embodiment, thecontrol portion 111 causes the display portion 140 to display proposedscenarios consisting of at least one verification method in associationwith services. Prior to the display of candidate scenarios in the firstexemplary embodiment, the control portion 111 causes the display portion140 to display the proposed scenarios. While a proposed scenario issimilar to the candidate scenario in that it consists of at least oneverification method, it is preferable that one proposed scenario beassociated with one service. That is, a proposed scenario is a scenarioproposed by the biological data registration support terminal 11 to thecustomer. FIG. 7 shows an example of display of proposed scenarios bythe display portion 140. As shown in FIG. 7 , the display portion 140displays a proposed scenario comprising the fingerprint verificationmethod and the vein verification method in association with the“withdrawal” service. In addition, the display portion 140 displays aproposed scenario including the fingerprint verification method, thepassword verification method, and the face verification method inassociation with the “transfer” service.

When the input portion inputs an instruction to modify the proposedscenario, the control portion 111 causes the display portion 140 todisplay candidate scenarios corresponding to the service to which thecorrection instruction is input. For example, when a clerk who heard arequest from a customer selects the “correction” button (performs acorrection instruction) of the proposed scenario for the “withdrawal”service via the input portion, the display portion 140 displayscandidate scenarios corresponding to the “withdrawal” service.

FIG. 8 shows a display example of candidate scenarios by the displayportion 140 in the modification. The control portion 111 acquirescandidate scenarios corresponding to the “withdrawal” service by thesame operation as in the first exemplary embodiment, and causes thedisplay portion 140 to display the acquired candidate scenarios inassociation with the “withdrawal” service. However, unlike the firstexemplary embodiment, the control portion 111 does not need to displaycandidate scenarios for the “transfer” service, for which modificationhas not been selected. In addition, the control portion 111 need notcause the display portion 140 to display the candidate scenarioconsisting of the same verification scheme as the proposed scenario forwhich the modification instruction has been given. Since the operationof the biological data registration support 1000 after displaying thecandidate scenarios is the same as that in the first exemplaryembodiment, explanation thereof will be omitted.

When the input portion has input a decision instruction for a proposedscenario, the control portion 111 acquires the proposed scenario as aregistration scenario. That is, the processing of S3 and S4 differs fromthat of the first exemplary embodiment. In the modification, the inputportion in S3 selects the “OK” button input by the clerk in accordancewith the customer's request (makes a determination instruction). Then,the display device 14 transmits the proposed scenario to the biologicaldata registration support device 11 together with the correspondingservice. The control portion 111 in the biological data registrationsupport device 11 acquires the proposed scenario received by thereceiving portion 110 as a registration scenario corresponding to theservice transmitted together with the proposed scenario. Since theoperation of the other biological data registration support system 1000is the same as that of the first exemplary embodiment, descriptionthereof will be omitted.

In the modification of the first exemplary embodiment, first, theproposed scenario is displayed, and when a correction instruction hasbeen input, candidate scenarios are displayed. In other words, when theuser of the biological data registration support device 11 likes theproposed scenario, it is sufficient to input the decision instruction,and when the user does not like the proposed scenario, the user canselect a preferred candidate scenario from among the candidatescenarios. Therefore, the operation burden on the user is reduced, andthe time required for registration of the biological data is shortened.

Second Exemplary Embodiment

(Constitution of Second Exemplary Embodiment)

A configuration example of a second exemplary embodiment will bedescribed. FIG. 9 is a block drawing showing a configuration example ofthe biological data registration support system 1001 according to thesecond exemplary embodiment. The biological data registration supportsystem 1001 differs from the first exemplary embodiment in that itincludes a biological data registration support device 17, a biologicaldata verification support device 18, a display device 19, and a veinscanner 20. In the present exemplary embodiment, portions of theseconstitutions different from those of the first exemplary embodimentwill be described, with descriptions of other portions being omitted asappropriate.

A control portion 113 acquires candidate scenarios consisting of atleast one verification method. The control portion 113 may acquire thecandidate scenarios by reading the candidate scenarios stored in thestorage portion. Alternatively, the control portion 113 may acquire thecandidate scenarios that the receiving portion 110 has received from anexternal device.

Then, the control portion 113 controls the display device 19 to displaythe acquired candidate scenarios in the display portion 190. At thistime, the control portion 113 controls the display device 19 to displaythe candidate scenarios and the services associated with the candidatescenarios in association with each other. Note that when the controlportion 113 acquires the candidate scenarios, the candidate scenariosmay be associated with services. Alternatively, after the controlportion 113 has acquired the candidate scenarios, the control portion113 may associate services with the candidate scenarios. A candidatescenario and a service being associated means that data that can specifya candidate scenario and data that can specify a service are associatedwith each other.

The control portion 113 acquires the candidate scenarios input by theinput portion in the display device 19 as registration scenarios, andacquires the services associated with those registration scenarios.Furthermore, in addition to acquiring the registration scenarios, thecontrol portion 113 of the present exemplary embodiment acquires backupscenarios input by the input portion in the display device 19. Similarlyto a registration scenario and a candidate scenario, a backup scenarioconsists of at least one verification method. The backup scenario isused as a backup scenario when the registration scenario cannot be used.In addition, the backup scenario is associated with the same service asthe registration scenario.

When the registration scenario and the backup scenario are associatedwith each other, the control portion 113 need not separately acquire theservice associated with the backup scenario. On the other hand, if theregistration scenario and the backup scenario do not correspond to eachother, the control portion 113 separately acquires the backup scenarioand the service associated with the backup scenario.

Subsequently, the control portion 113 acquires biological data forregistration through the same operation as in the first exemplaryembodiment. Moreover, the control portion 113 of the present exemplaryembodiment acquires, from the acquiring portion 120 or the acquiringportion 130, one set of biological data regarding a verification methodnot included in the registration scenario, among the verificationmethods included in the backup scenario, as biological data forregistration. That is, when there is a verification method among theverification methods included in a backup scenario that is not includedin the registration scenario, the control portion 113 controls theacquiring portion 120 or 130 to acquire the biological data regardingthat verification method. On the other hand, when all of theverification methods included in the backup scenario are included in theacquired registration scenario, the control portion 113 does not need toseparately acquire biological data regarding the backup scenario.

The control portion 113 specifies a common verification method commonlyincluded in a plurality of backup scenarios. When the commonverification method is not included in the registration scenario, thecontrol portion 113 acquires one set of biological data regarding thecommon verification method from the acquiring portion 120 or 130 asbiological data for registration. Furthermore, when a verificationmethod other than the common verification method included in the backupscenarios is not included in the registration scenario, one set ofbiological data regarding the verification method is acquired from theacquiring portion 120 or 130 as biological data for registration.

Then, the control portion 113 causes the transmitting portion 112 totransmit the biological data for registration that has been acquired,the plurality of registration scenarios, the services associated withthe registration scenarios, and the backup scenarios.

Note that the control portion 113 may specify a verification method thatis commonly included in the registration scenarios and the backupscenarios as a common verification method. Then, one set of biologicaldata regarding the common verification method and one set of biologicaldata regarding a verification method other than the common verificationmay be acquired from the acquiring portions 120 or 130.

The display portion 190 in the display device 19 displays the candidatescenarios acquired from the control portion 113 in association withservices. Then, the input portion in the display device 19 inputs thecandidate scenarios selected by the clerk out of the candidate scenariosdisplayed by the display portion 190. Furthermore, the input portion ofthe present exemplary embodiment inputs the scenarios selected by theclerk as backup scenarios among the candidate scenarios. Then, thetransmitting portion in the display device 19 acquires the candidatescenarios and the backup scenarios selected by the clerk from the inputportion, and together with the services corresponding to the candidatescenarios and the backup scenarios, transmits the candidate scenariosand the backup scenarios to the biological data registration supportdevice 17.

The transmitting portion 112 transmits the biological data forregistration acquired by the control portion 113, the plurality ofregistration scenarios, the backup scenarios, and the servicesassociated with the registration scenarios and the backup scenarios tothe server 15.

The customer database 151 in the server 15 stores the biological datafor registration received by the receiving portion, the registrationscenarios, the backup scenarios, and the services stored in associationwith each other. An example of data stored in the customer database 151is shown in FIG. 10 . The data shown in FIG. 10 differs from the data inthe customer database 151 shown in FIG. 3 in that a backup scenario isassociated with each service received by the customer with the ID number123456.

In FIG. 10 , in addition to the data shown in FIG. 3 , a backup scenarioconsisting of the vein verification method and a password verificationmethod is associated with the “withdrawal” service of the customer withID 123456. Furthermore, a backup scenario consisting of the veinverification method, the password verification method, and the faceverification method is associated with the service of “transfer”. Inaddition, vein image data is further associated with ID 123456 asbiological information of the customer. Note that a backup scenario maybe associated with only some services. Registration scenarios and backupscenarios may be associated with all ID numbers.

<Verification of Biological Data>

A configuration relating to verification of biological data in thebiological data registration system 1001 will be described with respectto portions that differ from the first exemplary embodiment.Descriptions of portions similar to those of the first exemplaryembodiment will be omitted as appropriate.

The server 15 searches the database 150 and transmits the registrationscenario, the backup scenario, and the biological data for registrationassociated with the received ID number and the received service to thebiological data verification support device 18. If a backup scenarioassociated with the received ID number and the received service does notexist in the database 150, the server 15 need not transmit a backupscenario. Further, the server 15 may transmit the password associatedwith the ID number. The password may be stored in the database 150together with the fingerprint image data or the like, or may be storedin another database.

The biological data verification support device 18 performs a displayfor acquiring from the customer biological data regarding theverification method included in the registration scenario received fromthe server 15. That is, the control portion in the biological dataverification support device 18 controls the display portion 180 so as toperform a display prompting the customer to provide biological data.Here, when the customer wants to change the verification method, thatis, wants to change the registration scenario, the display portion 180of the present exemplary embodiment performs a display for performingverification using the backup scenario instead of the registrationscenario.

For example, the display portion 180 displays a “change” icon togetherwith a display prompting the customer to provide biological data. Whenthe customer selects “change” via the input portion, the control portioncontrols the display portion 180 so as to perform a display promptingthe provision of biological data regarding the verification methodincluded in the backup scenario. Then, the control portion controls theacquiring portion 181 in the biological data verification support device18 to acquire biological data regarding the verification method includedin the backup scenario. The control portion 181 acquires the biologicaldata from the acquiring portion 181 and performs verification with thebiological data for registration transmitted from the server 15. In FIG.9 , a fingerprint scanner 1810 is denoted as an example of the acquiringportion 181, similarly to the first exemplary embodiment.

When the customer does not select “change” via the input portion andprovides the biological data regarding the verification method includedin the registration scenario, the control portion 180 need not acquirebiological data regarding the verification method included in the backupscenario. In this case, the biological data verification support device18 performs the same processing as in the first exemplary embodiment.

(Operation of Second Exemplary Embodiment)

<Registration of Biological Data>

FIG. 11 is a sequence diagram showing an example of operations relatedto biological data registration according to the second exemplaryembodiment. Also in the present exemplary embodiment, as in the firstexemplary embodiment, a situation is assumed in which a customer of abank goes up to a window and registers biological data via a clerk.Explanation of operations similar to those in the first exemplaryembodiment will be omitted.

The control portion 113 causes the display portion 190 to display theacquired candidate scenarios in association with the services (S11). Atthis time, the control portion 113 causes the display portion 190 toperform display such that registration of backup scenarios is possible.A backup scenario is a scenario that a customer can use instead of theregistration scenario. An example of display by the display portion 190is shown in FIG. 12 . FIG. 12 shows a display example in which it ispossible to select registration scenarios and backup scenarios in thesame screen, along with the guide text “Please select the scenario to beused for personal authentication necessary to receive each service.Please select a backup scenario as necessary.”

Here, it will be assumed that the customer requests the clerk toregister a backup scenario in case a fingerprint image cannot be imagedclearly due to the fingertip being chapped. While listening to thepreferences of the customer, the clerk then selects the candidatescenario to be selected as the registration scenario and the backupscenario to be registered as the backup scenario via the input portionincluded in the display device 19 (S12).

Then, the control portion 113 acquires the registration scenarios andthe backup scenarios input by the input portion, and the servicesassociated therewith (S13). For example, if the registration scenariosand the backup scenarios are selected as shown in FIG. 12 , the controlportion 113 acquires the registration scenario consisting of thefingerprint verification method and the password verification method,and the backup scenario consisting of the vein verification method andthe password verification method corresponding to the “withdrawal”service. The control portion 113 also acquires the registration scenarioconsisting of the fingerprint verification method, the passwordverification method, and the face verification method, and the backupscenario consisting of the vein verification method, the passwordverification method, and the face verification method corresponding tothe “transfer” service.

Thereafter, the control portion 113 specifies, as a common verificationmethod, the verification method commonly included in the tworegistration scenarios and the two backup scenarios that have beenacquired (S14). For example, as verification methods common among atleast two scenarios among the four scenarios acquired in associationwith the services of “withdrawal” and “transfer”, the control portion113 specifies three of the fingerprint verification method, the veinverification method, the face verification, and the passwordverification method as common verification methods.

The control portion 113 causes the acquiring portion 120 and theacquiring portion 130 to acquire biological data regarding each commonverification method. Also, the control portion 113 acquires biologicaldata regarding each verification method other than the commonverification methods out of the verification methods included in thefour scenarios. In the example of the present exemplary embodiment,since there is no verification method other than the common verificationmethods, the control portion 113 does not need to acquire biologicaldata regarding a verification method other than the common verificationmethods.

In the present exemplary embodiment, vein image data is acquired inaddition to the fingerprint image data and the face image data acquiredin the example of the first exemplary embodiment. The control portion113 controls the vein scanner 2000 to acquire the vein image data.Specifically, the vein scanner 200 is activated upon receiving a signalfrom the control portion 113. In the vein scanner 200, after thecustomer places his finger on or holds his finger over the vein scanner200, the vein scanner 200 captures an image of the vein pattern of thecustomer and generates/acquires the vein image data (S15). Theacquisition of fingerprint image data and face image data is the same asin the first exemplary embodiment. Although the password authenticationmethod is also a common verification method, biological data regardingthe password verification method need not be acquired because biologicaldata is not used in the password authentication method.

The biological data acquired by the acquiring portion 120, the acquiringportion 130, and the acquiring portion 200 is transmitted to thebiological data registration support device 17 by the transmittingportion (S7, S9, S16). Then, the control portion 113 acquires one set ofbiological data regarding each common verification method as biologicaldata for registration. Note that while the control portion 113sequentially acquires a plurality of sets of biological data from eachof the acquiring portions 120, 130, and 200, the control portion 113 maydelete biological data from the storage portion or synthesize two ormore sets of biological data so that one set of biological data isacquired regarding one verification method.

The control portion 113 causes the transmitting portion 112 to transmitthe acquired biological data for registration, the plurality ofregistration scenarios, the services associated with the registrationscenarios, and the backup scenarios. The transmitting portion 112transmits these sets of information to the server 15 (S17). At thistime, the control portion 113 may cause the transmitting portion 112 totransmit information for identifying the customer, for example, an IDnumber.

The server 15 stores the biological data for registration, theregistration scenarios, the backup scenarios, and the services inassociation with each other in the customer database 15. The server 15may store the customer's ID number in association with these sets ofinformation. By the above operation, registration of the biological dataof the customer is completed.

<Verification of Biological Data>

FIG. 13 is a flowchart showing an example of an operation related toverification of biological data according to the second exemplaryembodiment.

When the customer inserts a cash card or bank passbook into thebiological data verification support device 18, the control portion inthe biological data verification support device 18 reads the cash cardor passbook and acquires the customer's ID number (S20). Note that thecontrol portion may recognize the account number, the customer's name,etc. in place of the ID number or along with the ID number. Then, thecontrol section causes the display section 180 to display a list ofservices provided by the biological data verification support device 18.When the customer selects a service via the input portion, the controlportion acquires the service selected by the customer (S21). The controlportion transmits the ID number and the selected service to the server15 via the transmitting portion.

The server 15 searches the database 150 and transmits the registrationscenario, the backup scenario, and the biological data for registrationassociated with the received ID number and the received service to thebiological data verification support device 18. Then, the controlportion in the biological data verification support device 18 acquiresthe registration scenario, the backup scenario, and the biological datareceived by the receiving portion (S22).

The control portion in the biological data verification support device18 performs a display via the display portion 180 prompting theprovision of biological data regarding the verification method includedin the registration scenario (S23). In the case of the registrationscenario including a verification method that does not use biologicaldata, for example, the password verification method, the control portionmay perform a display via the display portion 180 prompting the input ofinformation other than biological data.

Here, if the customer wishes to change the registration scenario forsome reason, it is assumed that the customer inputs an instruction tomodify the registration scenario via the input portion (S24). When theinput portion inputs the correction instruction, the control portionperforms a display via the display portion 180 for acquiring from thecustomer biological data regarding the verification method included inthe backup scenario (S25). Further, when the backup scenario includes averification method that does not use biological data such as thepassword verification method, the control portion may perform a displayvia the display portion 180 prompting the input of information otherthan biological data.

On the basis of control by the control portion, the acquiring portion181 acquires from the customer biological data regarding theverification method included in the backup scenario (S26). Then, thecontrol portion collates the biological data acquired from the acquiringportion 181 and the biological data for registration acquired from theserver 15 (S27). When a verification method that does not use biologicaldata, such as the password verification method, is included in thebackup scenario, the control portion collates the password input by thecustomer via the input portion with the password acquired from theserver 15. The control portion provides the service acquired from theserver 15 to the customer (S28) when the collation of the biologicaldata and the information other than the biological data regarding allthe verification methods included in the backup scenario is successful.If there is a verification method for which collation has failed, thecontrol portion displays a message prompting the input of biologicaldata again via the display portion 180.

In S24, if no correction instruction is input, the acquiring portion181, based on control of the control portion, acquires from the customerbiological data regarding the verification method included in theregistration scenario (S29). Then, the control portion collates thebiological data acquired from the acquiring portion 181 and thebiological data for registration acquired from the server 15 (S30). Thecontrol portion provides the service acquired from the server 15 to thecustomer (S28) when the collation of the biological data and theinformation other than the biological data regarding all theverification methods included in the registration scenario issuccessful. If there is a verification method for which collation hasfailed, the control portion displays a message prompting the input ofbiological data again via the display portion 180.

In the second exemplary embodiment, it is possible to prepare a backupscenario that becomes a backup of the registration scenario, andacquire/verify biological data regarding the verification methodincluded in the backup scenario. In addition, when registeringbiological data, the customer can select any backup scenario. As aresult, even if the state of the customer's body changes from that atthe time of registration and becomes unsuitable for acquiring specificbiological data, the customer can select a different verificationmethod, so that it is possible to receive a service promptly.

Note that the biological data registration support device 17 need notacquire and display candidate scenarios. The control portion 113 in thebiological data registration support device 17 may read and acquireregistration scenarios and backup scenarios stored in the storageportion and may transmit the registration scenarios and the backupscenarios to the server 15 via the transmitting portion 112.

In addition, the backup scenario preferably includes an authenticationmethod not included in the registration scenario. A backup scenario mayalso be defined uniformly for each service, such that the customer isnot allowed to make a selection. Also, the backup scenario may besettable only for customers who so desire, or may be settable for allcustomers.

The server 15 may transmit the backup scenario to the biological dataverification support device 18 after a change instruction regarding theregistration scenario is input to the biological data verificationsupport device 18. That is, the server 15 may transmit the registrationscenario and the backup scenario to the biological data verificationdevice 18 at different times.

Third Exemplary Embodiment

A third exemplary embodiment will be described. The block diagramshowing the configuration example of the third exemplary embodiment isthe same as that of FIG. 2 or 9 , but the operation of the server 15 isdifferent from that of the first exemplary embodiment and the secondexemplary embodiment. In the present exemplary embodiment, functions ofthe server 15 different from those of the first exemplary embodiment andthe second exemplary embodiment will be mainly described, withdescriptions of other configurations being omitted as appropriate.

First, when an application for biological data registration isactivated, the control portion 111 in the biological data registrationsupport device 11 acquires one or more verification methods. The controlportion 111 may acquire the verification method from the storage portionin the biological data registration support device 11. Alternatively,the control portion 111 may acquire the verification method received bythe receiving portion from an external device. Then, the control portion111 transmits the acquired verification method to the display device 14via the transmitting portion 112, and causes the display portion 140 todisplay the verification method.

The user who sees the display of the display portion 140 selects one ora plurality of verification methods displayed in the display portion 140via the input portion. Then, the control portion 111 transmits theplurality of verification methods acquired from the input portion to theserver 15 via the transmitting portion 112.

The control portion in the server 15 selects one or a plurality of theverification methods received by the receiving portion and generates ascenario. The control portion may randomly select the acquiredverification methods to generate the scenario. Then, the control portionin the server 15 transmits the generated scenario to the biological dataregistration support device 1000 via the transmitting portion.

The control portion 111 in the biological data registration supportdevice 1000 acquires the scenario received by the receiving portion 110from the server 15 as a registration scenario. Alternatively, thecontrol portion 111 may acquire the scenario acquired from the server 15as a candidate scenario or a proposed scenario. In this case, thecontrol portion 111 displays the scenario acquired from the server 15 asa candidate scenario or a proposed scenario via the display portion 140.Then, when the user selects the candidate scenario or the proposedscenario, the control portion 111 may acquire the selected candidatescenario or proposed scenario as the registration scenario. Since theoperation of the control portion 111 after acquiring the registrationscenario is the same as that of the first exemplary embodiment and thesecond exemplary embodiment, description thereof will be omitted.

The biological data registration support device 1000 according to thepresent exemplary embodiment can generate a scenario from a verificationmethod selected by a user to make a registration scenario, a candidatescenario, or a proposed scenario. Therefore, the user can select averification method that takes into consideration the characteristics ofthe user's own body in advance or a verification method toward which theuser is less prone to feel resistance. Therefore, in the presentexemplary embodiment, it is possible to realize verification ofbiological data more according to the user's request.

A specific example of scenario generation by the server 15 is describedhereinbelow. FIG. 14 is a diagram showing a configuration example of theserver 15. The server 15 includes a customer database 151, averification method database 152, a receiving portion 153, a controlportion 154, and a transmitting portion 155. Here, in order to bedistinguished from the verification method database 152, for conveniencethe database in the server 15 is referred to as the customer database151.

The receiving portion 153 receives one or a plurality of verificationmethods from the biological data registration support device 11. Theverification method received by the receiving portion 153 may be averification method selected by the user of the biological dataregistration support terminal 11.

The control portion 154 acquires one or a plurality of verificationmethods received by the receiving portion 153. Then, the control portion154 refers to the verification method database and acquires the securityvalue associated with the acquired verification method. The securityvalue is a value indicating the level of security of the verificationmethod, and is stored in the verification method database in associationwith each verification method. The level of security indicates thedegree to which the verification will fail for an attacker attempting toreceive a service by impersonating a customer. In other words, when thesecurity value is high, verification with regard to biological data ofthe attacker is apt to fail, and when the security value is low, it iseasy for the verification of biological data of the attacker to succeed.For example, the security value may be regarded as the probability thatverification of an attacker is successful.

The control portion 154 calculates a scenario security value indicatingthe security level of a scenario on the basis of the security valueacquired for a verification method. The scenario may be one generated bythe control portion 154 randomly from one or more verification methods.Alternatively, the control portion 154 may create a scenario for allcases in which one or a plurality of collation methods are selected fromthe acquired one or a plurality of collation methods to calculate ascenario security value.

For example, the control portion 154 may calculate the scenario securityvalue by multiplying or adding the security value associated with theverification method that constitutes the scenario. In the case wherethere is only one verification method constituting the scenario, thesecurity value of the verification method may be set as the scenariosecurity value.

For example, assume that a scenario consists of the fingerprintverification method and the vein verification method. Also assume thatthe security value of the fingerprint verification method is p and thesecurity value of the vein verification method is q. In this case, thecontrol portion 154 calculates the scenario security value of thescenario as p×q.

Moreover, when the calculated scenario security value satisfies apredetermined condition for a service, the control portion 154 causesthe transmitting portion 155 to transmit the scenario in associationwith the service. The predetermined condition may be that the scenariosecurity value is greater than a threshold value defined for theservice. That is, when the scenario security value exceeds the thresholdfor a certain service, the control portion 154 may transmit the scenarioin association with the service. In other words, the scenario may betransmitted in association with the service when the scenario satisfiesthe level of security required to provide the service.

The control portion 154 reads a predetermined condition from the servicedatabase 156. Then, the control portion 154 determines whether or notthe calculated scenario security value satisfies the predeterminedcondition that has been read. For example, the control portion 154 mayread predetermined conditions for all the services stored in the servicedatabase 156 and determine whether all the generated scenario securityvalues satisfy the predetermined conditions on a round-robin basis.Alternatively, the control portion 154 may read from the servicedatabase 156 a predetermined condition for a specific service acquiredin advance and compare the condition with the generated scenariosecurity value.

The verification method database 152 stores a security value inassociation with each verification method. FIG. 15 shows an example ofdata stored in the collation method database 152. From FIG. 15 , thesecurity values associated with the fingerprint verification method, thevein verification method, the face verification method, and the passwordverification method are P, Q, R, and S, respectively. The security valuemay be a value determined or updated based on past experience, a popularattack, a prediction of increase in attacks, etc. For example, when anelaborate fingerprint film using silicone turns up, the security valueassociated with the fingerprint verification method may be updated to asmall value.

The service database 156 stores a predetermined condition in associationwith each service. For example, the predetermined condition maydetermine by the relationship between the scenario security value andthe threshold value whether or not a certain scenario is associated witha certain service. FIG. 16 shows an example of data stored in theservice database 156. From FIG. 16 , the predetermined conditionsassociated with transfer and withdrawal are scenario security value >pand scenario security value >q, respectively. Also, the predeterminedconditions associated with deposit and balance inquiry are scenariosecurity value >r and scenario security value >s, respectively. That is,the thresholds as to whether or not a certain scenario is to beassociated with each service shown in FIG. 16 are p, q, r, s.

For example, if an attacker who impersonates a user receives a servicesuch as “transfer” or “withdrawal” at a bank, money may be withdrawnfrom the bank account of the user, causing a great loss. On the otherhand, even if an attacker receives services such as “deposit” or“balance inquiry”, the chance is small of a serious loss immediatelyoccurring. Therefore, for services such as “transfer” and “withdrawal”,it is desirable that a threshold that is higher than the threshold ofservices such as “deposit” or “balance inquiry” be set.

Under the control of the control portion 154, the transmitting portion155 transmits a scenario satisfying a predetermined condition of aservice to the biological data registration support device 1000 inassociation with the service.

In this specific example, when the security value for a scenariosatisfies the condition defined for a service, the biological dataregistration support device acquires the scenario associated with theservice. Accordingly, since the user of the biological data registrationsupport system can register biological data regarding a scenario havingsufficient security with respect to a service received by the user, thesafety of service provision is enhanced.

(Hardware Constitution)

Hereinbelow, the hardware constitutions of the first exemplaryembodiment to the third exemplary embodiment will be described.

FIG. 17 is a block diagram showing a first example of the hardwareconfiguration of the above-described biological data registrationsupport devices 10, 11 and 17. Hereinafter, a first example of thishardware configuration will be referred to as a biological dataregistration support device 21. The biological data registration supportdevice 21 may be any general computer. For example, the biological dataregistration support device 21 may be a notebook PC, a desktop PC, aserver, a workstation, a blade server, or the like. In addition, thebiological data registration support device 21 may be connected in acommunicable manner to a server, another computer, or the like.

From FIG. 17 , the biological data registration support device 21includes a processor 1402, a memory 1404, a storage 1406, a northbridge1408 connected to the memory 1404, and an expansion slot 1410. Further,the biological data registration support device 21 further includes acommunication interface 1414 and a southbridge 1412 connected to thestorage 1406. These constituent elements are connected to each other bya bus and affixed to a motherboard.

The processor 1402 reads and executes instructions stored in the memory1404, the storage 1406, and the like. The processor 1402 may executeinstructions to display images in the display device 14. The controlportion 211 may be realized by the processor 1402. That is, theprocessor 1402 realizes the operation of the control portion 211 byreading out programs stored in the memory 1404 and the storage 1406. Theprocessor 1402 may be a circuit such as a CPU (Central Processing Unit),ASICs (Application Specific Integrated Circuits), or the like.

The memory 1404 is a computer readable storage medium that storesinformation. The memory 1404 may be a volatile storage medium such as aRAM or a nonvolatile storage medium such as a ROM. Further, the memory1404 may be an optical disk, a magnetic disk, or the like. The storage1406 may be a large-capacity computer readable storage medium. Thestorage 1406 may be, for example, a floppy (registered trademark) disk,a hard disk drive, an optical disk, a flash memory, or the like. Theabove exemplary embodiment is realized by the execution of aninstruction included in a computer program stored in a computer-readablestorage medium realizes.

The northbridge 1408 connects the parts regarded as the brains of thecomputer, such as the CPU and memory, and controls the timing and speedof data transfer. The northbridge 1408 handles data transfer betweendevices that operate primarily at high speed. On the other hand, thesouthbridge 1412 handles data transfer with relatively low-speeddevices. For example, the northbridge 1408 may be connected to a memory1404, a display device 14, and an expansion slot 1410 that can acceptexpansion cards. Also, the southbridge 1412 may be connected to thestorage 1406 and the communication interface 1414.

The communication interface 1414 may include various communication portssuch as USB, Bluetooth (registered trademark), Ethernet (registeredtrademark), wireless Ethernet, and the like. Further, thesecommunication ports may be connected to one or more input/outputdevices, for example, communication devices such as a keyboard, apointing device, a scanner, a wireless LAN (Local Area Network) adapter,a router, and the like. Further, the communication interface 1414 mayinclude a wireless LAN adapter. The communication interface 1414 mayrealize functions of the receiving portion 210 and the transmittingportion 212.

FIG. 18 is a block diagram showing a second example of the hardwareconfiguration of the biological data registration support devices 10, 11and 17. Hereinafter, a second example of this hardware configurationwill be referred to as a biological data registration support device 22.The biological data registration support device 22 may be a mobileterminal such as a mobile phone, a smartphone, a PDA (personal digitalassistant), or the like.

The biological data registration support device 22 may have a display1454, a transceiver 1468, an audio codec 1460, a control interface 1458,and a display interface 1456. Further, the biological data registrationsupport device 22 may further include a communication interface 1466, aprocessor 1452, a GPS (Global Positioning System) receiving module 1470,an extension memory 1474, a memory 1464, and an external interface 1462.

The display 1454 may, for example, be a TFT LCD (Thin-Film TransistorLiquid Crystal Display), an OLED (Organic Light Emitting Diode) display,or another display. Further, the display may be connected to the controlinterface 1458 and the display interface 1456. The processor 1452 mayexchange information with the user of the biological data registrationsupport device 22 via the control interface 1458 and the displayinterface 1456.

The display interface 1456 may be constituted by a circuit. The displayinterface 1456 controls the display in order to display images and otherinformation to the user. The control interface 1458 receives commandsfrom the user. The control interface 1458 may then convert the receivedcommands for handover to the processor 1452.

In addition, the biological data support device 22 may have an externalinterface 1462 that enables communication with the processor 1402. Theexternal interface 1462 enables communication between a peripheraldevice of the biological data support device 22 and the biological datasupport device 22. The external interface 1462 may provide wiredcommunication or wireless communication.

The extension memory 1474 may be connected to the biological dataregistration support device 22 via an extension interface 1472. Further,the extension memory 1474 may include a SIMM (Single Inline MemoryModule) card interface, for example. Further, the extension memory 1474may provide an additional storage area to the biological dataregistration support device 22, and may store the application and otherinformation. Further, the extension memory 1474 may store informationrelated to security. That is, the extension memory 1474 may function asa security management device of the biological data registration supportdevice 22. For example, an instruction for realizing safe use of thebiological data registration supporting device 22 may be programmed inthe extension memory 1474.

The biological data registration support device 22 performs wirelesscommunication via the communication interface 1466. The communicationinterface 1466 may include a digital signal processing circuit. Thecommunication interface 1466 may realize communication under modes andprotocols such as Global System for Mobile Communication (GMS), ShortMessage Service (SMS), Enhanced Messaging Service (EMS) and the like.Alternatively, the communication interface 1466 may realizecommunication under modes and protocols such as MMS (MultimediaMessaging Service), CDMA (Code Division Multiple Access), TDMA (timedivision multiple access) and the like.

Moreover, the communication interface 1466 may implements communicationunder modes and protocols such as PDC (Personal Digital Cellular), WCDMA(registered trademark) (Wideband Code Division Multiple Access), CDMA2000, GPRS (General packet radio service). The aforementionedcommunication occurs, for example, via the transceiver 1468.Communication using narrow range communication, for example, Bluetooth,Wi-Fi (registered trademark), or the like may also be generated via thetransceiver 1468. The communication interface 1466 may realize thetransmitting portion 212 and the receiving portion 210.

The GPS receiving module 1470 may provide data used by an applicationoperating in the biological data registration support device 22. Thedata may be, for example, data related to position or navigation.

In addition, the biological data registration support device 22 mayperform voice communication via the audio codec 1460. The audio codec1460 acquires voice information from the user and converts the voiceinformation into a form that can be used as digital information. Inaddition, the audio codec 1460 generates speech that can be heard by theuser. The information handled by the audio codec 1460 may be a voicecall, a recorded sound (a voice message, music file, or the like), asound generated by an application on the biological data registrationsupport device 22, or the like.

Since the processor 1452 and the memory 1464 are the same as thebiological data registration supporting device 22, their explanation isomitted. The processor 1452 may realize the control portion 211.Further, the receiving portion 210 and the transmitting portion 212 maybe realized by the external interface 1462.

FIG. 19 shows an example of the hardware configuration of the server 15described above. The server 15 may be any common computer. For example,the server 15 may be a notebook PC, a desktop PC, a server, aworkstation, a blade server, or the like. In addition, the server 15 maybe connected in a communicable manner to another server, anothercomputer, or the like.

From FIG. 19 , the server 15 includes a processor 1402, a memory 1404, astorage 1406, a northbridge 1408 connected to the memory 1404, and anexpansion slot 1410. Further, the server 15 further includes acommunication interface 1414 and a southbridge 1412 connected to thestorage 1406. These components are connected to each other by a bus andaffixed to the motherboard. Since the above hardware configuration isthe same as that of the biological data registration support device 22,explanation thereof will be omitted.

It should be noted that the receiving portion 153 and the transmittingportion 155 may be realized by the communication interface 1414. Inaddition, the customer database 151, the verification method database152, and the service database 156 may be realized by the storage 1406.

FIG. 20 is a block diagram showing an example of the hardwareconfiguration of the biological data verification support devices 16 and18 described above. Hereinafter, this hardware configuration will bereferred to as biological data verification support device 23. Thebiological data verification support device 23 may be any generalcomputer. For example, the biological data verification support device23 may be a notebook PC, a desktop PC, a server, a workstation, a bladeserver, or the like. In addition, the biological data verificationsupport device 23 may be connected in a communicable manner to theserver, another computer, or the like.

From FIG. 20 , the biological data verification support device 23includes a processor 1402, a memory 1404, a storage 1406, a northbridge1408 connected to the memory 1404, and an expansion slot 1410. Further,the biological data verification support device 23 further includes acommunication interface 1414, a southbridge 1412 connected to thestorage 1406, and an imaging device 231. These components are connectedto each other by a bus and affixed to the motherboard.

The imaging device 231 includes, for example, a CCD (Charge CoupledDevice) sensor, a CMOS (Complementary Meta Oxide Semiconductor) sensor,an image processor, and the like. The imaging device 231 converts lightfrom the subject received by the CCD sensor or the CMOS sensor, andgenerates image data. The subject may be part of a living body such as aface, a fingerprint, a vein pattern, an iris, or the entire body. Theimaging device 231 may have a structure suitable for imaging eachsubject. Further, the imaging device 231 may have a light source forilluminating the body, a placing portion for placing the body, and thelike.

Since the hardware configuration other than the imaging device 231 isthe same as that of the biological data registration support device 22,explanation thereof will be omitted. Note that the display unit 2300 maybe realized by the display device 230. In addition, the acquiringportion 2310 may be realized by the imaging device 231. The controlportion 211 may be realized by the processor 1402. The receiving portion210 and the transmitting portion 212 may be realized by thecommunication interface 1414.

The above-described exemplary embodiments are merely examples ofembodying the present invention, and various modifications can be madewithin the scope of the gist of the present invention recited in theclaims.

Priority is claimed on Japanese Patent Application No. 2016-69991, filedon Mar. 31, 2016, the content of which is incorporated herein byreference.

DESCRIPTION OF THE REFERENCE SYMBOLS

-   -   10: Biological data registration support device    -   11: Biological data registration support device    -   12: Camera    -   13: Fingerprint scanner    -   14: Display device    -   15: Server    -   16: Biological data verification support device    -   17: Biological data registration support device    -   18: Biological data verification support device    -   19: Display device    -   20: Vein scanner    -   21: Biological data registration support device    -   22: Biological data registration support device    -   23: Biological data verification support device    -   100: Control portion    -   101: Transmitting portion    -   110: Receiving portion    -   111: Control portion    -   112: Transmitting portion    -   113: Control portion    -   120: Acquiring portion    -   130: Acquiring portion    -   140: Display portion    -   150: Database    -   151: Database    -   152: Verification method database    -   153: Receiving portion    -   154: Control portion    -   155: Transmitting portion    -   156: Service database    -   160: Display portion    -   161: Acquiring portion    -   180: Display portion    -   181: Acquiring portion    -   190: Display portion    -   200: Acquiring portion    -   210: Receiving portion    -   211: Control portion    -   212: Transmitting portion    -   230: Display device    -   231: Imaging device    -   1000: Biological data registration support system    -   1001: Biological data registration support system    -   1402: Processor    -   1404: Memory    -   1406: Storage    -   1408: Northbridge    -   1410: Expansion slot    -   1412: Southbridge    -   1414: Communication interface    -   1452: Processor    -   1454: Display    -   1456: Display interface    -   1458: Control interface    -   1460: Audio codec    -   1466: Communication interface    -   1468: Transceiver    -   1462: External interface    -   1464: Memory    -   1470: GPS receiving module    -   1472: Extension interface    -   1474: Extension memory    -   1610: Fingerprint scanner    -   1810: Fingerprint scanner    -   2300: Display portion    -   2310: Acquiring portion

The invention claimed is:
 1. A control system comprising: a firstcontrol means configured to determine a first verification method and asecond verification method included in a first registration scenario anda second registration scenario, respectively, cause to display a messagefor prompting a user to enter information necessary to verify using thefirst verification method when the first registration scenario is usedfor a service, and cause to display a message for prompting the user toenter information necessary to verify using the second verificationmethod when the second registration scenario is used for the service;and a second control means configured to transmit a one-time password toa predetermined registered user when a predetermined requirement relatedto the first verification method or the second verification method ismet.
 2. A control method comprising: determining a first verificationmethod and a second verification method included in a first registrationscenario and a second registration scenario, respectively, causing todisplay a message for prompting a user to enter information necessary toverify using the first verification method when the first registrationscenario is used for a service, and causing to display a message forprompting the user to enter information necessary to verify using thesecond verification method when the second registration scenario is usedfor the service; and transmitting a one-time password to a predeterminedregistered user when a predetermined requirement related to the firstverification method or the second verification method is met.
 3. Anon-transitory computer-readable recording medium storing a program forcausing a computer to execute functions as: a first control meansconfigured to determine a first verification method and a secondverification method included in a first registration scenario and asecond registration scenario, respectively, cause to display a messagefor prompting a user to enter information necessary to verify using thefirst verification method when the first registration scenario is usedfor a service, and cause to display a message for prompting the user toenter information necessary to verify using the second verificationmethod when the second registration scenario is used for the service;and a second control means configured to transmit a one-time password toa predetermined registered user when a predetermined requirement relatedto the first verification method or the second verification method ismet.